← CVE Intelligence

CVE-2020-14504

Rockwell Automation / 1734-AENTR PUBLISHED

Description (CNA)

The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings.

Affected (CNA)

Vendor / productVersions
Rockwell Automation / 1734-AENTRaffected Series B 4.001 to 4.005, and 5.011 to 5.017; affected Series C 6.011 and 6.012

CWE

CWE-284

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.